Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.mft
File:                     XOMWuo-zBWfOy8cnBR02QA4lH8c.mft (raw, json)
Hash identifier:          5Tk4j4ry1ZsZfB6QiEnOdMtMIlFHitoHWeiIxc6doqQ=
Subject key identifier:   03:A9:96:7E:9B:E6:A4:78:D9:B8:B6:92:80:C1:D3:EF:89:EE:62:33
Authority key identifier: 5C:E3:16:BA:8F:B3:05:67:CE:CB:C7:27:05:1D:36:40:0E:25:1F:C7
Certificate issuer:       /CN=5ce316ba8fb30567cecbc727051d36400e251fc7
Certificate serial:       01962F3D6054000811367A223DF586FC56AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XOMWuo-zBWfOy8cnBR02QA4lH8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.mft
Manifest number:          02C2
Signing time:             Sun 13 Apr 2025 13:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:13 +0000
Files and hashes:         1: XOMWuo-zBWfOy8cnBR02QA4lH8c.crl (hash: kYIgBX4pPlvm0RdKWqHZwR8u8SGmI7lHmvaVVL+7V2k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:60:54:00:08:11:36:7a:22:3d:f5:86:fc:56:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ce316ba8fb30567cecbc727051d36400e251fc7
        Validity
            Not Before: Apr 13 13:01:13 2025 GMT
            Not After : Apr 14 13:01:13 2025 GMT
        Subject: CN=03a9967e9be6a478d9b8b69280c1d3ef89ee6233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:17:5a:cd:07:ff:44:af:ec:62:f0:2c:1f:fc:
                    db:e5:08:39:ed:4f:77:f4:be:9e:16:28:5d:91:dd:
                    25:c6:af:3d:f7:82:d1:50:df:0e:b4:5a:cc:23:21:
                    e3:a7:99:e7:09:0f:23:e4:ff:97:4a:6d:ba:a0:44:
                    c0:53:ef:49:b1:e5:81:0d:83:fe:ca:b5:23:7b:fe:
                    7a:38:b7:73:7d:3a:8f:2b:91:92:42:6c:00:21:44:
                    dc:c0:a1:8e:42:06:6b:a0:ec:d4:7c:7e:ec:92:77:
                    1d:f4:16:d1:03:c6:0e:9e:61:1a:78:4c:dc:16:0c:
                    b9:45:1c:59:2c:26:ca:05:84:16:06:a7:cb:ef:bb:
                    81:89:4f:37:c9:e9:df:0a:86:a2:8c:c8:6b:ad:d7:
                    16:1d:03:14:6e:0d:3b:cd:62:1c:18:bf:9f:0a:6f:
                    ad:3e:c5:ec:e5:19:02:bb:d4:80:76:31:79:0b:dc:
                    08:b1:99:e1:e7:da:be:e0:13:3c:ec:28:9d:b0:21:
                    ff:69:db:84:11:c2:f0:44:33:0c:ab:ca:0e:06:04:
                    46:8a:e4:bf:25:b8:35:c6:45:1c:4c:c5:d8:13:fd:
                    09:3c:27:62:89:85:4e:46:ee:21:a2:78:af:89:a2:
                    3a:d9:e7:16:62:2c:ee:c0:bf:c4:ac:00:2b:d5:58:
                    b8:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:A9:96:7E:9B:E6:A4:78:D9:B8:B6:92:80:C1:D3:EF:89:EE:62:33
            X509v3 Authority Key Identifier:
                keyid:5C:E3:16:BA:8F:B3:05:67:CE:CB:C7:27:05:1D:36:40:0E:25:1F:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XOMWuo-zBWfOy8cnBR02QA4lH8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:e3:1f:8e:95:31:07:c8:d9:76:34:c9:61:f5:80:56:df:d8:
         45:97:ea:48:1e:32:ac:8b:91:81:5a:0a:bd:34:77:b8:74:24:
         b6:f8:70:a1:bb:ac:fe:0f:28:61:9f:d8:c5:46:9e:4e:4f:6d:
         ab:28:fc:08:c6:d1:d2:74:13:c1:fa:b2:69:a6:0c:1a:62:7d:
         5f:8a:cd:c7:23:10:b8:53:9c:41:1a:50:dc:d3:ea:58:b6:33:
         68:e7:b3:02:7c:25:a8:54:4f:7f:3f:48:c7:fc:21:bd:05:04:
         40:69:6b:27:6c:41:03:a3:43:08:50:ae:1f:2b:4c:0a:84:64:
         e2:37:0d:c4:62:0d:f5:a0:28:06:16:ea:7a:f0:96:06:b9:0c:
         e9:17:a5:3c:14:d3:cf:51:ed:78:7f:45:1c:fa:8a:20:33:e3:
         c5:40:11:dd:ea:00:11:27:db:83:ac:92:f7:b9:cf:d3:49:77:
         10:e3:db:7e:81:61:74:09:cd:0c:b6:b5:87:11:9b:9e:e3:86:
         a9:b9:db:39:5c:8c:00:c6:57:5d:78:1c:41:9c:01:91:fe:51:
         ee:50:f9:b3:6a:d5:ea:da:68:11:20:a5:77:a7:38:1b:54:96:
         ad:5a:16:c4:69:98:88:17:1f:07:bc:af:61:19:dc:40:85:02:
         55:ca:91:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPWBUAAgRNnoiPfWG/FauMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjZTMxNmJhOGZiMzA1NjdjZWNiYzcyNzA1MWQzNjQwMGUy
NTFmYzcwHhcNMjUwNDEzMTMwMTEzWhcNMjUwNDE0MTMwMTEzWjAzMTEwLwYDVQQD
EygwM2E5OTY3ZTliZTZhNDc4ZDliOGI2OTI4MGMxZDNlZjg5ZWU2MjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRdazQf/RK/sYvAsH/zb5Qg57U93
9L6eFihdkd0lxq8994LRUN8OtFrMIyHjp5nnCQ8j5P+XSm26oETAU+9JseWBDYP+
yrUje/56OLdzfTqPK5GSQmwAIUTcwKGOQgZroOzUfH7skncd9BbRA8YOnmEaeEzc
Fgy5RRxZLCbKBYQWBqfL77uBiU83yenfCoaijMhrrdcWHQMUbg07zWIcGL+fCm+t
PsXs5RkCu9SAdjF5C9wIsZnh59q+4BM87CidsCH/aduEEcLwRDMMq8oOBgRGiuS/
Jbg1xkUcTMXYE/0JPCdiiYVORu4honiviaI62ecWYizuwL/ErAAr1Vi4vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAOpln6b5qR42bi2koDB0++J7mIzMB8GA1UdIwQY
MBaAFFzjFrqPswVnzsvHJwUdNkAOJR/HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWE9NV3VvLXpCV2ZPeThjbkJSMDJRQTRsSDhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8yNDdlZWYtZjcxYS00MjFmLWJiODYt
MjY3MjlkODk0ZWY3LzEvWE9NV3VvLXpCV2ZPeThjbkJSMDJRQTRsSDhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy8yNDdlZWYtZjcxYS00MjFmLWJiODYtMjY3MjlkODk0ZWY3
LzEvWE9NV3VvLXpCV2ZPeThjbkJSMDJRQTRsSDhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB+MfjpUx
B8jZdjTJYfWAVt/YRZfqSB4yrIuRgVoKvTR3uHQktvhwobus/g8oYZ/YxUaeTk9t
qyj8CMbR0nQTwfqyaaYMGmJ9X4rNxyMQuFOcQRpQ3NPqWLYzaOezAnwlqFRPfz9I
x/whvQUEQGlrJ2xBA6NDCFCuHytMCoRk4jcNxGIN9aAoBhbqevCWBrkM6RelPBTT
z1HteH9FHPqKIDPjxUAR3eoAESfbg6yS97nP00l3EOPbfoFhdAnNDLa1hxGbnuOG
qbnbOVyMAMZXXXgcQZwBkf5R7lD5s2rV6tpoESCld6c4G1SWrVoWxGmYiBcfB7yv
YRncQIUCVcqRsQ==
-----END CERTIFICATE-----